Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/NLONGxWCaDncCXl5R1oWg-KTHPI.roa
File: NLONGxWCaDncCXl5R1oWg-KTHPI.roa (raw, json)
Hash identifier: wEU6hkf61GZGgIuFGLQHCPpd8fVGVUdNGM1QqUlTpzA=
Subject key identifier: 34:B3:8D:1B:15:82:68:39:DC:09:79:79:47:5A:16:83:E2:93:1C:F2
Certificate issuer: /CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Certificate serial: 0194228DE45B77306DAE5E288589C6CA8E55
Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/NLONGxWCaDncCXl5R1oWg-KTHPI.roa
Signing time: Wed 01 Jan 2025 15:48:31 +0000
ROA not before: Wed 01 Jan 2025 15:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48743
IP address blocks: 2a12:8fc6:500::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e4:5b:77:30:6d:ae:5e:28:85:89:c6:ca:8e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Validity
Not Before: Jan 1 15:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34b38d1b15826839dc097979475a1683e2931cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:b3:56:2d:82:da:3c:19:0c:20:6f:2d:cc:
3f:a5:44:cf:96:ff:9a:16:e9:40:74:df:ab:39:22:
41:0b:06:f2:17:4e:ff:87:6f:63:13:df:13:0b:ed:
3b:09:fb:b0:67:c9:30:86:87:d1:d1:52:21:16:e0:
f1:3c:94:a4:22:9b:e1:ed:55:b3:19:8c:17:21:49:
74:2a:a0:d8:fa:08:c2:26:10:4f:ea:a6:d9:d3:a7:
33:00:12:76:ae:1b:49:fe:67:5e:17:61:8b:20:c3:
89:c3:20:75:83:56:6d:a2:a4:19:88:1c:bf:0b:66:
06:eb:e7:27:3b:dd:5e:74:6e:5c:b1:78:b5:07:6b:
48:8b:48:91:c9:9a:86:27:7c:d2:0d:91:de:74:8f:
02:37:fe:eb:6e:a8:29:09:35:fe:80:bc:94:0c:87:
8e:aa:af:bb:7e:5e:d3:1a:27:d5:0c:c1:c9:8e:3b:
40:a7:e2:91:c5:00:d1:a3:5e:97:be:0d:31:0c:c5:
6f:f6:92:fd:07:f9:ec:95:ae:f6:c2:4d:da:82:17:
35:7c:7b:be:1a:5f:ee:c6:b6:e0:a3:12:21:24:50:
b5:f4:71:b4:42:ce:8f:e3:72:ff:0f:fb:df:42:2f:
de:ba:a9:54:1e:62:b1:28:85:34:32:e4:59:cb:8e:
7e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B3:8D:1B:15:82:68:39:DC:09:79:79:47:5A:16:83:E2:93:1C:F2
X509v3 Authority Key Identifier:
keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/NLONGxWCaDncCXl5R1oWg-KTHPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8fc6:500::/48
Signature Algorithm: sha256WithRSAEncryption
63:42:e6:dd:ba:c1:3a:e7:35:8f:3d:16:5d:7f:a0:f9:7a:55:
5e:cb:e1:fc:88:93:34:24:87:43:e3:05:b0:60:51:10:da:ac:
01:0c:69:e6:4a:57:6b:82:4f:81:2a:aa:2e:7e:46:80:e3:bd:
87:fd:bc:3b:0e:d3:1c:4d:8b:14:b0:eb:f3:9d:b8:f7:14:26:
53:63:e8:dd:a3:db:18:8f:56:5f:1f:71:0d:25:94:25:4d:bd:
67:52:98:f2:7d:b6:e2:39:85:38:2e:2b:b3:0c:4e:47:5d:3e:
c6:83:41:e3:33:82:81:60:a3:95:ba:61:28:0c:ce:01:10:e4:
a5:06:63:8e:9b:84:78:b3:7e:0b:59:cc:39:3e:bc:31:49:13:
9f:37:42:49:35:3c:b8:b3:29:59:85:8d:e0:25:61:a7:69:14:
05:6f:f0:49:ce:6f:57:42:a0:d2:1c:aa:fc:8f:12:43:52:91:
4b:89:c8:9f:ce:42:6a:6c:97:57:10:70:a4:6a:7e:41:09:af:
10:6a:12:b5:67:cf:6e:29:06:7b:a0:66:2b:61:6a:58:95:06:
ff:76:1f:7a:b5:ea:54:46:84:65:e5:32:5a:54:ca:1e:99:1b:
d8:bf:11:23:19:52:68:02:da:c8:ab:1b:55:72:5a:ed:8f:60:
20:7d:28:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:30:24 2025 by rpki-client